Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
File: fsXyOE4h9kNhkTORzhqSs3LoD68.mft (raw, json)
Hash identifier: QyI/4HexXN1va/UHSGwBb1MUOBC1m4AZ95N4hkRphF8=
Subject key identifier: 27:AF:4D:F0:E1:E9:B8:44:E0:E5:B5:7B:59:51:B7:75:AF:21:41:7A
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 019F954A5CA17BFE3D4E2A9415C0DDE5BF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:46 +0000
Manifest this update: Fri 24 Jul 2026 18:01:46 +0000
Manifest next update: Sat 25 Jul 2026 18:01:46 +0000
Files and hashes: 1: LPa8zPLpV8cXLL0nCvftZJmqBOc.roa (hash: LXKc34IWPeXHGhj7ZOiZu7C5VwcYcKy1yZjCEZ9N19Q=)
2: fsXyOE4h9kNhkTORzhqSs3LoD68.crl (hash: SMYfnzd4KM0+lM20E9fZKCgdNiQSwCVQr8Muva3x/Q4=)
3: pQG7xs47QDWXz1fB29umQErevhE.roa (hash: YQn0GgeL+9mDh4EZTTSLpL9PtFZrlsb8YoTmjdlwtnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:5c:a1:7b:fe:3d:4e:2a:94:15:c0:dd:e5:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Jul 24 18:01:46 2026 GMT
Not After : Jul 25 18:01:46 2026 GMT
Subject: CN=27af4df0e1e9b844e0e5b57b5951b775af21417a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:38:a6:e7:91:b0:ef:bc:94:82:10:32:bc:
ed:5c:39:61:48:0c:23:74:32:c0:87:a9:08:11:fc:
a0:23:a7:16:74:c1:94:21:06:17:1e:82:d2:e2:34:
ba:a9:f5:c5:41:00:86:cf:31:19:4a:6a:56:89:84:
b4:c2:57:58:fc:3a:69:90:9e:39:8d:03:f0:24:68:
c3:fb:49:4b:4e:b6:79:7b:9d:7e:f3:88:71:b9:88:
5e:68:ef:60:8f:54:70:dd:21:e5:21:ad:ad:fa:32:
8d:cb:7a:1d:5e:f3:2d:5b:c0:a2:dd:2a:6c:52:9c:
29:a7:b0:be:3c:3e:d2:bb:21:7e:03:2c:fd:69:a6:
5b:b2:56:22:69:02:ae:96:a2:be:27:59:d4:50:a2:
d4:4d:c7:52:2f:4b:d0:48:5c:a9:65:97:ef:36:47:
c8:56:f9:bf:43:15:75:26:ed:ce:d4:bf:e6:b4:28:
a9:44:76:37:03:a7:1b:c0:a1:53:3a:d9:d3:01:82:
f3:92:10:77:27:5c:2c:17:51:dd:28:dd:06:b3:7c:
8e:74:1b:bf:87:c9:ca:3f:76:e5:7d:8d:a2:44:e0:
2a:2c:dc:73:de:22:02:e1:36:5b:c6:fe:1b:cf:eb:
85:70:70:d6:b3:22:c1:a1:51:ad:40:97:b5:3b:eb:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:4D:F0:E1:E9:B8:44:E0:E5:B5:7B:59:51:B7:75:AF:21:41:7A
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:be:d7:31:ed:24:40:bb:47:5b:7a:c6:db:44:66:70:04:b8:
36:96:8a:08:3f:7a:30:29:44:83:29:df:46:4e:2d:d3:dd:7f:
9e:3f:11:b1:a4:e3:d4:1b:41:f0:98:17:8c:06:67:72:de:cd:
36:84:f2:47:8e:27:7e:e2:3b:50:48:5c:e1:d9:be:a8:24:c2:
20:af:39:8e:e2:0a:46:25:d5:5f:49:dd:dc:7c:a9:b3:99:12:
15:a3:96:34:bf:92:83:30:7a:ed:dd:b0:32:c3:a8:52:87:65:
55:5c:14:fd:db:64:c3:0e:f0:54:54:f9:3e:ec:bc:88:69:36:
28:58:c5:9c:c7:27:54:09:bd:f8:56:b3:e1:d5:1d:61:a9:ca:
b2:40:5e:62:d0:3d:dd:fb:dc:1f:60:fa:4f:ae:ff:70:4d:d9:
9b:1f:3f:45:10:78:1b:d0:ec:2d:8d:76:37:10:1e:39:4f:7b:
90:10:d9:1c:fd:30:76:37:ed:eb:7f:11:1a:d8:f8:80:24:3c:
ef:ed:18:85:bf:57:fb:d0:a1:4e:0e:1b:78:85:fa:eb:2b:be:
82:56:47:f9:d9:35:5d:65:41:82:05:e2:83:65:db:d2:b9:69:
90:3c:85:8b:51:57:bd:aa:0a:c5:4f:79:f6:2a:8a:af:97:d0:
a2:a2:85:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSlyhe/49TiqUFcDd5b+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzVmMjM4NGUyMWY2NDM2MTkxMzM5MWNlMWE5MmIzNzJl
ODBmYWYwHhcNMjYwNzI0MTgwMTQ2WhcNMjYwNzI1MTgwMTQ2WjAzMTEwLwYDVQQD
EygyN2FmNGRmMGUxZTliODQ0ZTBlNWI1N2I1OTUxYjc3NWFmMjE0MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9Y4pueRsO+8lIIQMrztXDlhSAwj
dDLAh6kIEfygI6cWdMGUIQYXHoLS4jS6qfXFQQCGzzEZSmpWiYS0wldY/DppkJ45
jQPwJGjD+0lLTrZ5e51+84hxuYheaO9gj1Rw3SHlIa2t+jKNy3odXvMtW8Ci3Sps
Upwpp7C+PD7SuyF+Ayz9aaZbslYiaQKulqK+J1nUUKLUTcdSL0vQSFypZZfvNkfI
Vvm/QxV1Ju3O1L/mtCipRHY3A6cbwKFTOtnTAYLzkhB3J1wsF1HdKN0Gs3yOdBu/
h8nKP3blfY2iROAqLNxz3iIC4TZbxv4bz+uFcHDWsyLBoVGtQJe1O+vmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCevTfDh6bhE4OW1e1lRt3WvIUF6MB8GA1UdIwQY
MBaAFH7F8jhOIfZDYZEzkc4akrNy6A+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNYeU9FNGg5a05oa1RPUnpocVNzM0xvRDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvZnNYeU9FNGg5a05oa1RPUnpocVNzM0xvRDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvZnNYeU9FNGg5a05oa1RPUnpocVNzM0xvRDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE77XMe0k
QLtHW3rG20RmcAS4NpaKCD96MClEgynfRk4t091/nj8RsaTj1BtB8JgXjAZnct7N
NoTyR44nfuI7UEhc4dm+qCTCIK85juIKRiXVX0nd3Hyps5kSFaOWNL+SgzB67d2w
MsOoUodlVVwU/dtkww7wVFT5Puy8iGk2KFjFnMcnVAm9+Faz4dUdYanKskBeYtA9
3fvcH2D6T67/cE3Zmx8/RRB4G9DsLY12NxAeOU97kBDZHP0wdjft638RGtj4gCQ8
7+0Yhb9X+9ChTg4beIX66yu+glZH+dk1XWVBggXig2Xb0rlpkDyFi1FXvaoKxU95
9iqKr5fQoqKFDQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:01 2026 by rpki-client